Application Security Specialist

Volvo Group; Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Volvo Group is seeking an Application Security Specialist to mature the security stance across Digital Product teams. You will translate governance into practical guidance, enable Stable Teams with secure design practices, and advance security maturity medals through measured enablement.

You will work with DevSecOps, engineering, and product teams to promote secure-by-design delivery, adoption of baselines, and actionable training.

Qualifications

• 6+ years of experience in application security fundamentals, secure SDLC, and OWASP Top 10.
• Ability to translate security requirements into practical guidance for product teams.
• Experience with application security governance, baselines, controls, or maturity models.
• Good understanding of DevSecOps concepts, CI/CD, security automation, and developer workflows.
• Ability to advise engineering teams on secure-by-design practices.
• Strong communication skills, including workshops, training, playbooks, and written guidance.
• Ability to work with metrics, adoption tracking, maturity reporting, and continuous improvement.
• Risk-based mindset with the ability to prioritize based on business and product context.
• Strong stakeholder collaboration across product, engineering, DevSecOps, and security teams.
• Familiarity with frameworks such as OWASP SAMM, DSOMM, ISO 27001, or NIST is preferred.

Responsibilities

• Operationalize application security baselines, tiered requirements, and maturity models across Stable Teams.
• Contribute to the development and continuous improvement of application security governance frameworks.
• Translate governance expectations into practical guidance, patterns, playbooks, and team-facing materials.
• Identify gaps in adoption and propose improvements to increase consistency, scalability, and usability.
• Provide clear and actionable guidance to Stable Teams on application security principles and secure design practices.
• Deliver workshops, training, and awareness activities to support adoption of application security requirements.
• Act as a trusted advisor to teams, helping them interpret requirements and apply them appropriately in context.
• Promote secure-by-design thinking through education, consultation, and continuous engagement.
• Support the implementation and evolution of application security maturity levels and security maturity medals.
• Help Stable Teams understand their current maturity level and the steps needed to progress.
• Contribute to maturity assessments, improvement roadmaps, and structured enablement approaches.
• Support consistent adoption of maturity expectations across teams and Digital Product areas.
• Contribute to defining and tracking application security KPIs, adoption metrics, and maturity progression.
• Analyze trends in governance adoption, maturity improvement, and security control implementation.
• Provide insights to improve the effectiveness of application security governance capabilities.
• Support reporting on application security posture, adoption, and maturity evolution.
• Partner with Application Security Engineering and DevSecOps teams to align governance requirements with CI/CD, automation, and Golden Path capabilities.
• Promote security-by-default, automation, and scalable security practices.
• Help translate technical security capabilities into practical adoption guidance for Stable Teams.

Skills

Application security

Secure SDLC

OWASP Top 10

DevSecOps

CI/CD

Security governance

Stakeholder collaboration

Job description

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

Role Purpose

The Application Security Specialist helps improve application security maturity across Volvo Group by translating governance requirements into practical, usable guidance for Stable Teams. The role supports the operationalization of application security baselines, tiered requirements, and security maturity medals. It focuses on enabling teams through clear guidance, education, adoption support, and continuous improvement, rather than enforcement alone.

Mission

Advance application security maturity across Digital Product teams by making security requirements clear, practical, and adoptable. Support Stable Teams in understanding their application security obligations, improving their maturity level, and applying secure‑by‑design practices in the way they design, build, and operate Digital Products.

Key Accountabilities

Application Security Governance Enablement

• Operationalize application security baselines, tiered requirements, and maturity models across Stable Teams.
• Contribute to the development and continuous improvement of application security governance frameworks.
• Translate governance expectations into practical guidance, patterns, playbooks, and team‑facing materials.
• Identify gaps in adoption and propose improvements to increase consistency, scalability, and usability.

Stable Team Enablement

• Provide clear and actionable guidance to Stable Teams on application security principles and secure design practices.
• Deliver workshops, training, and awareness activities to support adoption of application security requirements.
• Act as a trusted advisor to teams, helping them interpret requirements and apply them appropriately in context.
• Promote secure‑by‑design thinking through education, consultation, and continuous engagement.

Security Maturity Medals

• Support the implementation and evolution of application security maturity levels and security maturity medals.
• Help Stable Teams understand their current maturity level and the steps needed to progress.
• Contribute to maturity assessments, improvement roadmaps, and structured enablement approaches.
• Support consistent adoption of maturity expectations across teams and Digital Product areas.

Metrics & Continuous Improvement

• Contribute to defining and tracking application security KPIs, adoption metrics, and maturity progression.
• Analyze trends in governance adoption, maturity improvement, and security control implementation.
• Provide insights to improve the effectiveness of application security governance capabilities.
• Support reporting on application security posture, adoption, and maturity evolution.

DevSecOps & Golden Path Alignment

• Partner with Application Security Engineering and DevSecOps teams to align governance requirements with CI/CD, automation, and Golden Path capabilities.
• Promote security‑by‑default, automation, and scalable security practices.
• Help translate technical security capabilities into practical adoption guidance for Stable Teams.

Expected Outcomes

• Stable Teams clearly understand application security requirements and how to apply them.
• Application security baselines and tiered requirements are consistently adopted.
• Security maturity medals are understood and used to drive measurable improvement.
• Application security governance capabilities are practical, scalable, and continuously improved.
• Metrics provide useful insight into adoption, maturity progression, and risk reduction.
• Security governance is translated into practical outcomes that support secure‑by‑design delivery.

Scope of Responsibility

The role contributes to the development, operationalization, and continuous improvement of application security governance capabilities. It works closely with Stable Teams, Digital Product Owners, Application Security Engineering, DevSecOps, and security governance stakeholders.

• Application Security Governance
• Tiered Security Requirements
• Secure Application Design Guidance
• Security Maturity Models and Medals
• Application Security Metrics and ReportingSecurity Enablement and Training
• Application Risk Reduction

Required Skills

• 6+ years of experience in application security fundamentals, secure SDLC, and OWASP Top 10.
• Ability to translate security requirements into practical guidance for product teams.
• Experience with application security governance, baselines, controls, or maturity models.
• Good understanding of DevSecOps concepts, CI/CD, security automation, and developer workflows.
• Ability to advise engineering teams on secure‑by‑design practices.
• Strong communication skills, including workshops, training, playbooks, and written guidance.
• Ability to work with metrics, adoption tracking, maturity reporting, and continuous improvement.
• Risk‑based mindset with the ability to prioritize based on business and product context.
• Strong stakeholder collaboration across product, engineering, DevSecOps, and security teams.
• Familiarity with frameworks such as OWASP SAMM, DSOMM, ISO 27001, or NIST is preferred.

Who We Are And What We Believe In

At Volvo Group, we believe in the value of in‑person collaboration and connection. Our general principle is that employees work from the office.

We are committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents across the group’s leading brands and entities.

Applying to this job offers you the opportunity to join Volvo Group. Every day, you will be working with some of the sharpest and most creative brains in our field to be able to leave our society in better shape for the next generation. We are passionate about what we do, and we thrive on teamwork. We are almost 100,000 people united around the world by a culture of care, inclusiveness, and empowerment.

Volvo Group Digital Technology & Operations (DTO)

is a new division established to integrate the capabilities of VG Digital & IT and VG Connected Solutions to accelerate the digital transformation in Volvo Group. The organizational set up is structured around domains, digital products with functions for digital excellence to deliver outstanding customer experience.

Joining the new DTO division means being part of a fast‑moving digital product‑oriented organization where teams truly own what they build from idea to delivery. In DTO, we work in agile, cross‑functional teams, mastering the latest technology, and creating outstanding digital experiences that make a real difference for our colleagues and Volvo Group customers around the world. We put people first and build our culture on trust, passion, customer success, change, and performance. If you want to grow, collaborate across functions and entities, and help shape the future of digital products within Volvo Group, DTO is a great place to be.